shield LEGAL

Privacy Policy

Last updated: 1 May 2026

info

This Privacy Policy governs the collection, use, storage, and disclosure of personal information by Shoaib Tour and Travels (hereinafter "we", "us", or "the Company"), a travel agency registered and operating from New Delhi, India. It applies to all services offered through our offices and website. By using our services you consent to the practices described herein.

1

Company Information

The data controller responsible for your personal information is:

Shoaib Tour and Travels

Prop No. 159-C, Basement, Opp. Fortis Escorts Hospital
Sarai Jullena, Okhla, New Delhi – 110025

Tel: 011-40809903  |  Mobile: +91-9717743876

2

Information We Collect

We collect the following categories of personal information when you engage our services:

  • personIdentity Data — full name, date of birth, nationality, gender, passport number, and copies of government-issued identification documents.
  • contact_mailContact Data — postal address, email address, telephone and WhatsApp numbers.
  • flightTravel Data — itinerary details, destination countries, travel dates, flight preferences, hotel requirements, and visa application information.
  • paymentsFinancial Data — billing address and payment transaction references. We do not store full card numbers; payments are processed through secure, PCI-DSS compliant gateways.
  • devicesTechnical Data — IP address, browser type, operating system, and pages visited when you access our website, collected via cookies and server logs.
  • chatCommunications Data — records of correspondence including emails, WhatsApp messages, and phone call notes made in connection with your booking or inquiry.
3

How We Use Your Information

We process your personal data only for lawful purposes, including:

  • check_circleProcessing flight ticket bookings and managing reservations with airlines.
  • check_circlePreparing, submitting, and tracking visa applications on your behalf to embassies and consulates.
  • check_circleArranging travel insurance, hotel bookings, and ancillary travel services.
  • check_circleCommunicating with you regarding your booking, application status, or inquiry.
  • check_circleComplying with legal and regulatory obligations under Indian law, including anti-money laundering (AML) requirements and IATA regulations.
  • check_circleSending promotional offers and travel updates where you have given consent (you may opt out at any time).
  • check_circleImproving our services through analysis of aggregate, anonymised usage data.
4

Legal Basis for Processing

We process your personal data under the following legal bases as applicable under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law:

  • check_circleConsent — where you have freely given, informed, and specific consent for processing.
  • check_circleContract — where processing is necessary to perform the travel services you have contracted with us.
  • check_circleLegal Obligation — where processing is required to comply with applicable laws and regulatory requirements.
  • check_circleLegitimate Interests — for fraud prevention, security, and internal business administration purposes.
5

Sharing of Information

We do not sell, rent, or trade your personal information. We may share it with the following categories of recipients solely as necessary to deliver our services:

  • check_circleAirlines and GDS providers for reservation and ticketing.
  • check_circleEmbassies and Visa Processing Centres as required to submit your visa application.
  • check_circleInsurance companies when arranging travel insurance.
  • check_circleHotels and ground operators to fulfil accommodation and tour bookings.
  • check_circlePayment gateways for secure processing of transactions.
  • check_circleRegulatory and law enforcement authorities where disclosure is required by law.

Any third party with whom we share your data is required to handle it securely and in accordance with applicable data protection laws.

6

International Transfers

Visa applications and flight bookings inherently require transferring your personal data to foreign embassies, consulates, and international airlines. Such transfers are necessary to fulfil the services you have engaged us for. We ensure that all necessary disclosures to foreign authorities are made only for the stated travel purpose and in compliance with the requirements of the relevant country.

7

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

  • check_circleBooking records and travel documents — 7 years from the date of travel, as required for tax and accounting compliance under Indian law.
  • check_circleVisa application documents — 3 years from the date of application outcome.
  • check_circleMarketing consent records — until you withdraw consent.

After the applicable retention period, data is securely deleted or anonymised.

8

Security of Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include restricted access controls, secure document storage, and encrypted digital communications. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9

Your Rights

Under the Digital Personal Data Protection Act, 2023 and other applicable Indian laws, you have the following rights with respect to your personal data:

visibility

Right to Access

Request a copy of the personal data we hold about you.

edit

Right to Correction

Request correction of inaccurate or incomplete data.

delete

Right to Erasure

Request deletion of your data where it is no longer required, subject to legal retention obligations.

block

Right to Withdraw Consent

Withdraw consent for marketing communications at any time without affecting prior processing.

gavel

Right to Grievance Redressal

Lodge a complaint with the Data Protection Board of India if you believe your rights have been infringed.

person_off

Right of Nominee

Nominate a person to exercise your data rights in the event of your death or incapacity.

To exercise any of the above rights, please contact us at the details in Section 1. We will respond within 30 days of receiving your request.

10

Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site traffic. The cookies we use include:

  • check_circleEssential cookies — required for the website to function correctly.
  • check_circleAnalytics cookies — help us understand how visitors interact with our website (e.g., Google Analytics).
  • check_circlePreference cookies — remember your settings and preferences.

You can control or disable cookies through your browser settings. Disabling essential cookies may affect website functionality.

11

Children's Privacy

We do not knowingly collect personal data directly from children under the age of 18 without verifiable parental or guardian consent. When a minor is included in a travel booking, personal data is collected from and with the consent of the parent or legal guardian managing the booking.

12

Third-Party Links

Our website may contain links to third-party websites such as airline portals, embassy websites, or payment gateways. We are not responsible for the privacy practices of those external sites and recommend that you review their privacy policies independently.

13

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. The revised policy will be made available at our office and on our website, with the "Last updated" date revised accordingly. Continued use of our services after any changes constitutes your acceptance of the updated policy.

14

Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of the Republic of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023. Any dispute arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of New Delhi.

15

Contact & Grievance Officer

For any questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data, please contact our Grievance Officer:

Grievance Officer — Shoaib Tour and Travels

location_onProp No. 159-C, Basement, Opp. Fortis Escorts Hospital,
Sarai Jullena, Okhla, New Delhi – 110025
call011-40809903  |  +91-9717743876

We will acknowledge your grievance within 72 hours and endeavour to resolve it within 30 days.